If you are using Mobile Safari on iPad, iPhone, or iPod Touch running iOS 5.1, than you should be cautious of a security issue that involves address bar spoofing. The issue was discovered by David Vieira-Kurz of MajorSecurity, and involves “an error within the handling of URLs when using javascript’s window open() method.” This can be exploited by malicious sites to display custom URLs, potentially fooling users into supplying personal information to a malicious website (since the Safari address bar can display a totally different address than the website that is actually being displayed.

MajorSecurity has notified Apple of the issue and it is at the point where it is likely just a matter of time before Apple releases the patch to address the problem. While Apple works on a fix for the issue, it is probably a good idea to avoid opening untrusted links and think twice about sending personal information to any website that asks for it through Safari on your iOS device.

The security firm also created a sample web page to show the vulnerability in action. If you are interested in checking it out, open the following URL on your iOS device (one with iOS 5.1 installed):

Click the demo at the top of the page and you will see a site that very closely resembles Apple’s official site but is actually hosted by MajorSecurity.

Stay tuned for more information by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

[Source: TheNextWeb]

Stay tuned for more news and info on this topic by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

Stay tuned for more news and info on this topic by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

We previously heard some rumors about the possibility of a new development team working on releasing a new SIM interposer solution similar to the popular Gevey SIM. This would provide iPhone 4S users with the elusive unlock if it was to surface. If the recent video released on YouTube by the folks over at ApplenBerry is true, it would seem that the release of the new Gevey Ultra S will eventually provide unlock satisfaction to the owners of a GSM iPhone 4S.

The video demonstrates the team installing a SIM card in an iPhone 4S using the new Gevey Ultra S interposer. This allows previously unavailable network connections to be made on an iPhone 4S running iOS 5.0 and iOS 5.0.1 with modern firmware versions 1.0.11, 1.0.13, and 1.0.14. The Gevey Ultra S is also being advertised as a true plug and play SIM-unlocking interposer which is compatible with all of the GSM iPhone 4S devices. The tool is said to have a lower power consumption than previous offerings and doesn’t require any physical modifications to the SIM itself.

Product Description:

No Need to Dial International Emergency Number 112

There is now no need to dial the international emergency number (112) during installation or when rebooting your iPhone 4S. Our learning technology allows for true plug-and-play iPhone 4S unlock solution. Beware of solutions that require you to CONNECT to an emergency number. This violates telecommunication abuse policies and lead to service cancelation on some networks.

Decrease Power Consumption

The F981 chipset in our new GEVEY™ Ultra S is engineered to operate under the 3- volt standard. That means your battery will last just as long as it would without the GEVEY™ Ultra S. Beware of counterfeit solutions claiming to use a similar chipset. We’ve invested the time and money to engineer our new GEVEY™ Ultra S with better power efficiency. This kind of technology can’t be duplicated or implemented on cheaper chipsets.

GEVEY™ True Plug-and-Play Unlocking SIM Interposer

Now you can unlock your iPhone 4S with the re-engineered GEVEY™ Ultra S SIM interposer. Our new technology takes advantage of a new exploit that fully unlocks your iPhone 4S. It’s true plug-and-play functionality, so just pop it in and unlock your phone with the original sim card. If you don’t have the original sim card, additional programming may be required. Further instructions will be sent with your GEVEY™ Ultra S package.

Untethered Unlock with no Jailbreak Needed

With our new GEVEY™ Ultra S, you won’t have to connect to any external device to unlock your iPhone 4S. Even better, jailbreaking is not necessary so you won’t void your Apple warranty.

Compatible with all GSM iPhone 4S SIM Cards

The new GEVEY™ Ultra S is now a single interposer that works for all networks. It actually “learns” your network, so there is no need to select a specific GEVEY™ Ultra S for your service carrier. A new GEVEY™ Ultra S comes in learning mode, but after inserting the GEVEY™ Ultra S and your SIM card in your iPhone 4S, our technology learns your network types and settings for a true plug-and-play unlock solution.

One caveat of this exploit is that, if for some reason you need to change your current SIM with a SIM card from a different carrier, you will need to reset your GEVEY™ Ultra S with the reset SIM included with your genuine GEVEY™ Ultra S. Beware of other solutions that claim to circumvent this issue. It is simply not possible when taking advantage of this new exploit in the iPhone 4S firmware.

Complete Unlock with all 2G and 3G Data Services

Purchase genuine GEVEY™ products and completely unblock all 2G and 3G data- transfer functionality. By default, your network carrier has blocked data network settings inside your iPhone 4S firmware. You will need to use the original network carrier’s SIM to activate your iPhone, and our GEVEY™ Ultra S will unlock all functionality available by your network.

Be aware that some telecommunication carriers restrict data services to network phones only. Unfortunately, this limitation is unrelated to SIM cards and phone locking technology, so there is no phone unlocking solution that can guarantee connectivity to every data network. Check with your intended carrier to confirm data networks like 2G and 3G services are allowed on out-of-network phones.

No SIM Card Cutting or Physical Modifications

The new GEVEY™ Ultra S is engineered using the F981 chipset, which is more expensive but performs a whole lot better than cheaper solutions. We don’t manipulate, polish, or sand down cheaper microchips to make our SIM interposer small enough to fit, and there is no need for you to cut your SIM card or modify your iPhone 4S in any way.

Beware of counterfeit GEVEY™ products claiming to use the F981 chipset and selling for less than our rock bottom pricing. Most people won’t be able to tell the difference by visual inspection, but some cheaper, larger chips used in these solutions are sanded, cut, or polished to fit in your iPhone 4S. These solutions expose sensitive electronic components and are notoriously prone to overheating, short-circuit, and breakage.

Guaranteed Better Reception than Last Generation Unlocking Solutions

Now that we no longer take advantage of the old exploits, we’ve re-engineered the GEVEY™ Ultra S for enhanced signal strength with strong, consistent voice and data communication. Now there is no compromise in reception when choosing genuine GEVEY™ products.

Stay tuned for more news and info on this topic by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

This guide is for Windows only and will teach you how to jailbreak various iOS devices using the newly released tool, Absinthe. The current version of Absinthe is 0.3. It should be noted that this is an UNTETHERED JAILBREAK, meaning that you will be able to reboot your phone just like you normally would at any time.

This guide works with the following device/firmware combinations:

• iPhone 4S | 5.0 (9A334)
• iPhone 4S | 5.0.1 (9A405)
• iPhone 4S | “other” 5.0.1 (9A406)
• iPad2 (CDMA) | 5.0.1 (9A405)
• iPad2 (GSM) | 5.0.1 (9A405)
• iPad2 (Wi-Fi) | 5.0.1 (9A405)

It should also be noted that the team that put this jailbreak together included both Saurik and MuscleNerd, both of which are core members of the iPhone Dev Team; three members of the Chronic Dev Team including posixninja, pod2g, and nikias; and the legendary planetbeing, who is the iOS hacker/developer who is responsible for initially porting both Android and Linux to the iPhone) is accepting donations. Feel free to donate via PayPal if you want to show some support.

PLEASE READ BEFORE CONTINUING:

Absinthe create a backup and restores it onto your device as part of the way it gets files on the device, so we recommend the device is mostly empty when you start the process. To do this, it is advised to create a backup in in iTunes first (connect to iTunes and sync). If you are using iCloud to backup, go to Settings > iCloud > Storage and Backup > Backup Now.

Once you have backed up, on your device go to Settings > General > Reset > Erase All Content and Settings. As mentioned, make sure you have a backup of your content first. You don’t need to Erase All Content and Settings if you don’t want to, but the jailbreak could take up to 20-30 minutes to complete if you don’t, depending on your device that is.

Follow the steps below to successfully jailbreak your iOS device:

1. Download the Windows version of Absinthe 0.3 from the following link (http://cache.greenpois0n.com/dl/absinthe-win-0.3.zip)
2. Once downloaded, double click the zip file to unzip it if your browser didn’t already automatically unzip the file.
3. (Make sure your device is connected first) Double-click Absinthe to launch it and you will see the Absinthe home screen. Absinthe at this point should tell you what device and firmware version is detected.
4. Press the jailbreak button. Once you do this, Absinthe will go through a few status messages while it jailbreaks your device. It will stop for a bit at Waiting for reboot – not done yet, don’t unplug your device yet!
5. Once the device has finished rebooting, it will continue the jailbreak. During this process, do not touch or unplug your iOS device.
6. Once the process has finished in Absinthe, it will alert you to unlock the screen if necessary and tap “Absinthe” icon to finish the jailbreak. Remember, the icon may not be on the first pay, so you might have to scroll to find it.
7. Tapping the icon will bring up a webview with a white page, and then your device will restart. Just a quick note: If you see an “Error establishing database connection” error or a white screen, which lasts longer than 1 minute, please go to Settings and turn on VPN, and wait instead. The VPN connection will give an error (which is normal). At this point, a reboot should happen a few moments after the error.
8. You will see the Apple logo with a progress bar quickly as the device restarts and then your device will power back on. Just a quick note: The Set Up iPhone (or iPad) GUI you see when you restore an iOS Device will now appear. If you backed up with iCloud at the beginning of this tutorial, please choose Restore from iCloud Backup in the Set Up iPhone GUI, and restore from the backup you took at the beginning of this guide. The iDevice will then restore from backup, reboot, and you’re good to go.
9. Cydia is now on your device where the Absinthe icon was before

That’s it! Your device is not jailbroken.

If you have any questions feel free to leave them below. We’ll help where we can!

Stay tuned for more information as it surfaces by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

This guide is for Mac only and will teach you how to jailbreak various iOS devices using the newly released tool, Absinthe. The current version of Absinthe is 0.3. It should be noted that this is an UNTETHERED JAILBREAK, meaning that you will be able to reboot your phone just like you normally would at any time.

This guide works with the following device/firmware combinations:

• iPhone 4S | 5.0 (9A334)
• iPhone 4S | 5.0.1 (9A405)
• iPhone 4S | “other” 5.0.1 (9A406)
• iPad2 (CDMA) | 5.0.1 (9A405)
• iPad2 (GSM) | 5.0.1 (9A405)
• iPad2 (Wi-Fi) | 5.0.1 (9A405)

It should also be noted that the team that put this jailbreak together included both Saurik and MuscleNerd, both of which are core members of the iPhone Dev Team; three members of the Chronic Dev Team including posixninja, pod2g, and nikias; and the legendary planetbeing, who is the iOS hacker/developer who is responsible for initially porting both Android and Linux to the iPhone) is accepting donations. Feel free to donate via PayPal if you want to show some support.

PLEASE READ BEFORE CONTINUING:

Absinthe create a backup and restores it onto your device as part of the way it gets files on the device, so we recommend the device is mostly empty when you start the process. To do this, it is advised to create a backup in in iTunes first (connect to iTunes and sync). If you are using iCloud to backup, go to Settings > iCloud > Storage and Backup > Backup Now.

Once you have backed up, on your device go to Settings > General > Reset > Erase All Content and Settings. As mentioned, make sure you have a backup of your content first. You don’t need to Erase All Content and Settings if you don’t want to, but the jailbreak could take up to 20-30 minutes to complete if you don’t, depending on your device that is.

Follow the steps below to successfully jailbreak your iOS device:

1. Download the Windows version of Absinthe 0.3 from the following link (http://cache.greenpois0n.com/dl/absinthe-mac-0.3.zip)
2. Once downloaded, double click the zip file to unzip it if your browser didn’t already automatically unzip the file.
3. (Make sure your device is connected first) Double-click Absinthe to launch it and you will see the Absinthe home screen. Absinthe at this point should tell you what device and firmware version is detected.
4. Press the jailbreak button. Once you do this, Absinthe will go through a few status messages while it jailbreaks your device. It will stop for a bit at Waiting for reboot – not done yet, don’t unplug your device yet!
5. Once the device has finished rebooting, it will continue the jailbreak. During this process, do not touch or unplug your iOS device.
6. Once the process has finished in Absinthe, it will alert you to unlock the screen if necessary and tap “Absinthe” icon to finish the jailbreak. Remember, the icon may not be on the first pay, so you might have to scroll to find it.
7. Tapping the icon will bring up a webview with a white page, and then your device will restart. Just a quick note: If you see an “Error establishing database connection” error or a white screen, which lasts longer than 1 minute, please go to Settings and turn on VPN, and wait instead. The VPN connection will give an error (which is normal). At this point, a reboot should happen a few moments after the error.
8. You will see the Apple logo with a progress bar quickly as the device restarts and then your device will power back on. Just a quick note: The Set Up iPhone (or iPad) GUI you see when you restore an iOS Device will now appear. If you backed up with iCloud at the beginning of this tutorial, please choose Restore from iCloud Backup in the Set Up iPhone GUI, and restore from the backup you took at the beginning of this guide. The iDevice will then restore from backup, reboot, and you’re good to go.
9. Cydia is now on your device where the Absinthe icon was before!

That’s it! Your device is not jailbroken.

If you have any questions feel free to leave them below. We’ll help where we can!

Stay tuned for more information as it surfaces by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

Apple recently released iOS 5.0.1 and the jailbreak community has been advised to not upgrade. Pod2g recently found an exploit that may help to provide an untethered jailbreak and this exploit is patched on iOS 5.0.1. If you like many are seeking to use an untethered jailbreak, it would be wise to stay on iOS 5.0 because thats where the untethered jailbreak will be. For those of you who accidentally upgraded or unknowingly upgraded to iOS 5.0.1 you may be wondering how to downgrade back to iOS 5.0. In this case, you may downgrade if you have an SHSH previously saved. To do so, follow the procedure outlined below:

Required Files and Software

• Latest version of TinyUmbrella (Mac) (Windows)
• Redsn0w 0.9.9b8 (Mac) (Windows)
• iOS 5.0 Saved SHSH (needed from before)
• iTunes (latest)
• iOS5 IPSW (iPhone 3GS, iPhone 4, iPad, iPod Touch 3G, iPod Touch 4G)

Downgrade iOS 5.0.1 To iOS 5.0 With Saved SHSH

1. Connect your iPhone to your computer and open TinyUmbrella.
2. Click on Save SHSH (the iOS 5 SHSH will only show if you have it saved previously). Once saved, close TinyUmbrella.
3. Open RedSn0w 0.9.9b8 and go to Extras > SHSH Blobs > then click Submit (it will open a window). Here, browse to the Saved SHSH file (which is in the directory C:/User/Acount Name/.shsh folder. (the saved SHSH file for iOS 5.0)
4. After submitting it, you will see the Blobs Submission Report.
5. Now click on Stich, give it the same SHSH file (which you previously submitted) and give the SHSH file, then the iOS 5.0 IPSW file. Wait for it to complete.
6. Now open TinyUmbrella and go to the Advanced tab. Here, check all the boxes and then close it.
7. Now restore the Stiched IPSW file with iTunes in DFU mode.

Voila – you’re done! At this point we would recommend staying on iOS 5.0 and waiting for further news from the jailbreak community devs.

For those of you who do NOT have an SHSH file saved, you are currently out of luck. If you are on iOS 5.0.1, your current option is to jailbreak utilizing RedSn0w 0.9.9b8 or Sn0wbreeze 2.8b11. This jailbreak will be a tethered jailbreak, which means that you will have to connect your iOS device to your computer and “just boot” utilizing the software for every time you need to boot. You can download BigBoss’s Semi-Tether package from Cydia to help ease the pain of a tethered jailbreak. The Semi-Tether allows you to boot your iOS device and use all the stock applications until you can “just boot” with your computer as opposed to being stuck on the boot logo. As of right now, it is a decent alternative to allow you to use your iOS device for main functions.

Stay tuned for more information as it surfaces by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

iOS 5.0.1 was Apple’s answer to the battery problems plaguing iOS 5. Although, it has been reported that iOS 5.0.1 doesn’t seem to be fixing the problem at all. iOS 5.0.1 also plugs up some important jailbreak exploits that hackers are working on using to develop the untethered jailbreak for iOS 5. Since it plugs up those exploits, Pod2g recommended not upgrading so that you can remain on the firmware that will support the untethered jailbreak when it comes out. If, however, you’re too late and you’ve installed iOS 5.0.1 and are having trouble downgrading, you can still have a tethered jailbreak for your device. iH8sn0w tweeted just a few minutes ago that sn0wbreeze has been updated to jailbreak iOS 5.0.1.

This jailbreak tool only supports Windows and is not for Mac. Mac users can use redsn0w to jailbreak their iOS 5.0.1 device; Windows users can choose between this tool or redsn0w. Like I mentioned in the last news article that I wrote about sn0wbreeze, I feel that sn0wbreeze is an easier tool to use because of the pictures and better directions which take you step by step. This is a great way for new jailbreakers to understand how jailbreaking works. It seems more simple than redsn0w. While redsn0w has less steps involved, it doesn’t really explain anything, you generally need to read a guide to learn how to use it, or have previous experience. Yet with sn0wbreeze you can be totally new to jailbreaking and understand what it’s telling you to do because of the visuals.

Whats New in Version 2.8b11?

• Supports iOS 5.0 (9A334)/5.0.1 (9A405)
• Fixed iBooks sandbox crashing issues (as of 2.8b9).
• Fixed location services issues with iPhone 3GS users running the iPad baseband (as of 2.8b9).
• Re-added iPad baseband install option to iPhone 3GS.
• Tethered devices are booted via iBooty which is extracted to the Desktop after running sn0wbreeze.

Download Sn0wbreeze 2.8 b11

• Download Sn0wbreeze 2.8b11 for Windows

Old bootrom iPhone 3GS’s can still have the untethered jailbreak. Anything newer is still tethered. The whole pastie by iH8sn0w can be read below:

===============================
sn0wbreeze v2.8 [BETA 11]:
===============================
* Supports iOS 5.0 (9A334)/5.0.1 (9A405)
* Fixed iBooks sandbox crashing issues (as of 2.8b9).
* Fixed location services issues with iPhone 3GS
users running the iPad baseband (as of 2.8b9).
* Re-added iPad baseband install option to iPhone 3GS.
* Tethered devices are booted via iBooty which is
extracted to the Desktop after running sn0wbreeze.
===============================
Tethered?
===============================
- iPhone 3GS (old bootrom)…NO
- iPhone 3GS (new bootrom)..YES
- iPhone 4 (GSM)…………YES
- iPhone 4 (CDMA)………..YES
- iPod Touch 3G………….YES
- iPod Touch 4…………..YES
- iPad 1G……………….YES
===============================

************************************************
** iPhone 3GS iPad baseband (06.15.00) users: **
************************************************
- Re-flash the iPad baseband via sn0wbreeze
if you restore(d) to a stock 5.0 firmware.
************************************************

Now available at: http://iH8sn0w.com

// iH8sn0w

Stay tuned for more information as it surfaces by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

Source: iH8sn0w

We recently reported that ex-Chronic Dev Team member pod2g tweeted out that he found an untether bug for iOS 5. Other than the information given previously, it is unknown on how far he’s gotten as well as when we can expect public release. Although he’s remained MIA for the last couple of months or so, he seems to be actively keeping us updated on what’s in store. Eight hours ago, he tweeted out a warning to those who want to update to iOS 5.0.1 upon release.

According to his tweet, iOS 5.0.1 will close an iOS security bug found by Charlie Miller that makes exploits dramatically easier to tackle. This would imply that a jailbreak for iOS 5.0 versus iOS 5.0.1 could come quicker. Pod2g clarified in a later tweet that it wasn’t a matter of iOS 5.0.1 never being jailbreakable, it will just be more difficult and will take longer.

So for us end users, what should we do? Below is the grant scheme of things:

iOS 5.0 Users

Remain on this firmware and do not update to iOS 5.0.1. After iOS 5.0.1 releases, Apple will close the signing window for this firmware and won’t allow downgrades. With SHSH not being an option anymore, you may have to wait longer for a jailbreak if you’re on iOS 5.0.1.

iOS 5.0.1 Beta Users

Downgrade back to iOS 5.0. As the above, the signing window will be closed when iOS 5.0.1 is publicly released, leaving you no choice but to update up, not downgrade.

iOS 4 Users

Hang tight. Many of you are most likely on iOS 4 still due to unlocks and baseband issues. Breaking those just to update iOS 5 would be unwise. Information as it comes will be posted to give better clarification in this regard. However, if unlocks and basebands are not an issue for you and you’re able to update to iOS 5, I strongly would. Just as the above, the signing window will close when iOS 5.0.1 releases.

Ultimately, it is your decision whether to take action on what has been stated. However I would take in consideration all the factors on the table and base your decision upon your own personal situation.

Stay tuned for more information as it surfaces by following us on Facebook, Twitter, and/or subscribing to our RSS feed.

Source: pod2g

Are you an iOS 5 user and have been waiting dreadfully for an untethered jailbreak for your iDevice? Well there’s good news for you- @pod2g, iPhone hacker of the ex-Chronic Dev Team announced that a bug has been discovered in iOS 5 and could help towards an untethered jailbreak.

@pod2g tweeted officially on November 7^th:

Hey jailbreaking friends, I’ve found a bug that can untether iOS 5. Don’t expect a release soon, but I’m gonna work hard in it.

It is unclear whether the untethered jailbreak will work on the iPad 2 and the iPhone 4S or if the bug exists in iOS 5.0.1 beta either. But as of right now, Redsn0w and Sn0wbreeze released by iPhone Dev Team and iH8sn0w have tethered jailbreaks for iOS 5.0 and iOS 5.0.1 betas only. BigBoss also released a SemiTether jailbreak (which has limitations) that lets users reboot their jailbroken devices without connecting it to a computer. With all these tethered and semi-tethered jailbreaks, STILL nothing beats a fully untethered one that everyone is anticipating for.

When will the untethered jailbreak be released? @pod2g has not provided an ETA, but it will hopefully be released after iOS 5.0.1 is released.

Stay tuned for more news and info on this topic by following us on Facebook, Twitter, and/or subscribing to our RSS feed.